EDB-39495

PoC

IBM Lotus Domino R8 - Password Hash Extraction

view exploit source exploit_dbtype webappsauthor Jonathan Brochepublished 2016-02-25catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2005-2428USmedium5.0OT highExploit
Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the H…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan